n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow where the agent ingests data from external validation tools and performs actions based on that data, which constitutes a surface for indirect prompt injection.
- Ingestion points: Validation error messages and node configurations processed via MCP tools, as described in
SKILL.mdandERROR_CATALOG.md. - Boundary markers: Absent in the skill instructions.
- Capability inventory: The skill suggests using tools with workflow modification capabilities, such as
n8n_autofix_workflow,n8n_create_workflow, andn8n_update_partial_workflow. - Sanitization: Absent; the skill relies on the underlying platform's handling of tool outputs.
- [SAFE]: The skill contains instructional examples of hardcoded credentials in
FALSE_POSITIVES.mdused specifically to illustrate insecure practices and teach the agent to identify and fix them using proper credential management.
Audit Metadata